BACKGROUND OF THE INVENTION 

The Internet has permitted information flow to be delivered to students in hitherto 
unimaginable quantities. The quality of information, however, is not uniform. Some 
information comes with the imprimatur of recognized providers, such as Scholastic, or 
5 publishers, such as Random House and Harper Collins. Still other information can come 
from recognized institutions such as Woods Hole Oceanographic Institute or from 
university media centers, where it has been reviewed and internally monitored for 
content. 

Schools today are charged with the dual tasks of providing access to the Internet while 
10 concomitantly providing a safe and secure learning environment for the students. 
Filtering e-mails is one important step in the creation of a school district (or business 
environment) with secure "virtual classrooms", "virtual student/teacher conference 
centers" and "virtual group sites". With filtering comes the need to monitor the 
transmissions. It is vital that an enterprise, be it a school or a business, be able to have its 
15 constituent parts communicate with one another in real time, provide information and 
obtain flow both internally and from without, be secure and provide a level of filtering 
and monitoring consistent with the objectives of the enterprise. In the case of a school 
district, it is important that the schools have access to information, be able to access a 
"classroom" community for "share learning" and provide a level on filtering and 
20 monitoring consistent with the particular requirement of a given class or group of 
students. At the same time, intra-class and intra-school communication is necessary to 
permit the rapid dissemination of information, whether time sensitive or recipient 
sensitive, in an efficient manner. 



One system that provides a universal solution to allowing information flow to both 
students and educators, while maintaining control of the type and character of material 

received by students is described in Provisional Patent No: . It permits 

internal community or group generation to permit dissemination of information to 
5 different levels of educators or administrators on a needs basis. The system can employ 
common server capability to permit multiple districts to have their individual SchoolMail, 
while at the same time providing the capability of interaction and connectivity among the 
districts, based upon screening and search criteria. The system can provide filtering and 
monitoring for both incoming and outgoing data transmissions on multiple levels, such as 
10 class specific, school specific and district or region specific. It can also control the 
desktop of the personal computers that on the SchoolMail system to prevent students 
from getting off and onto an open and uncontrolled system. 

The hierarchy within that system was created to permit the easy management of every 
aspect of the SchoolMail system: 
15 > Systems administrators 

> Reseller administrators 

> District administrators 

> School administrators 

> Monitors 
20 > Students 

Every level of the hierarchy can control the levels below. When new accounts are 
created, they inherit the attributes of the levels above. Within each level, there can be 
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multiple sub-levels with attributes of levels both above and below, depending on the 
person who is responsible for creating the account. 

However, without the ability to filter web access, filtered e-mail alone, while vital and 
necessary for a school system, cannot fully satisfy all of the security requirements of a 
5 school. If a student can circumvent the system by going on to another site offering web- 
based e-mail, then the filtering and monitoring relied upon to provide security is 
hampered. Although a school can implement a proxy server-based solution such as Bess 
or a client-based solution such as CyberSitter to block access to particular websites, 
students can circumvent those solutions and surf for unblocked sites to provide unfiltered 

10 and unmonitored e-mail access. In order to complete the security of a school system, a 
client based solution should be implemented and configured from an administrator's 
interface which will allow the administrator, or their designee, to allow access settings to 
be applied to an individual user upon log-in. A filtered web browser which blocks sites 
commencing with the first page and any below that in the site's hierarchy fills the need 

15 for school security and prevents circumvention of the monitoring and filtering systems 
which permit controlled "virtual classrooms" and collaborative, shared learning. 
DESCRIPTION OF THE METHOD AND SYSTEM 

The browser can be integrated and made a part of a filtering and monitoring system for a 
school or other controlled environment. Because of the hierarchical nature of the filtering 
20 and monitoring system, an administrator can configure the browser to require that it 
checks all pages before they are delivered. The administrator can also configure the 
system so as to prevent access to any other browser, making the filtered browser the only 
one available to the users. Because the filtering and monitoring system has varying 
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levels of control available at each level of the hierarchy and can be configured down to 
the individual user level, it permits the overall system to remain secure, while still 
providing appropriate browser capabilities to the users, be they students or teachers. 

Administration 

5 The administration of the system has both central component and user components that 
can be handled by the principle administrator or delegated to others within the hierarchy. 
These can be adjusted so that there can be a greater or lesser administrative function for 
each component, depending on the desires of the user and the requirements for security 
inherent in the system. 

1 0 Checking/Adding words 

This interface allows the administrator to view the current filtered word lists, and add or 
remove words as desired. The administrator can also enter a word into a search field to 
see if the word would be filtered as written. Enter Word 

If a word on the Master Flagged Word List is found, the user is given the option to unflag 
15 it in the browser. Similarly, if word is not found, a user can add it as partial or whole for 
both features. 

Administrative Interface 

Browser settings page 

Browser settings can easily be applied to individuals or groups of users, or an entire 
20 school or district at once. 



Block sites interface 

Text area where uniform resource locators (URLs) can be entered. 

Pages will be blocked at or below the URL entered - if the top level domain of a website 

is entered, all pages in that site will be blocked. 

5 Customized keywords 

Allow administrators to add/exclude words on the keyword list. 

Allow pop-ups 

One feature that the administrator can activate prevents some sites from pushing ads. 
Content filtering 

10 This switch can turn filtering on or off for the selected user or users. For example, 
administrators may want to turn filtering off altogether for staff 

System blocking 

• Allow any application to launch, but only allow the browser to have Internet access 

• Block everything that is not the browser, hide start menu, block ctrl-alt-del. functions 
1 5 from the keyboard 

• Or off altogether 

Address bar show/hide 

Prevents manual entry of URLS. 
Allow https 

20 Can prevent access to shopping sites. 
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Adding sites to Always allow/Never allow lists through browser 

In addition to using the administration interfaces, users with administration privileges can 
have additional features, such as two additional buttons, available when they log in 
through the browser. These buttons allow them to instantly mark a page either to be 
5 always allowed or never blocked. Doing so adds the currently viewed site to the 
appropriate list. 

EXAMPLE APPLICATIONS 
Example 1: Page blocking: 

Pages are checked against all of the below before being displayed to the user. If it is to be 
10 blocked, the user sees a dialogue explaining that the page is blocked. Text for the 
dialogue can be configurable on both host and the user level. Each of these can be turned 
on or off for an entire license, school, or any other group of or individual users. 

Only Allow site list 

• Can be used to restrict access to a small group of known sites. 
15 • Sites on this list will still be scanned for content unless they also appear on the 
Always Allow list. 

Always Allow site list 

Sites on this list will always be displayed - content scanning will not take place. 
Never Allow site list 

20 • Sites on this list will always be blocked - content scanning will not take place. 
Keyword scan of the site's textual content 

Page content is compared against a list of keywords. If words from the list are found on 
the page the page is blocked. 



Scanning form input 

When users type information into a form (such as a search engine), the browser scans the 
input before it is submitted. This can effectively stop users from searching for sites that 
may contain questionable content, even before they attempt to load them. 

5 Disallowing manual URL entry/Hide addressbar 

If active, the browser will not accept entered URLs. This prevents the browser being used 
to visit sites other than those linked to in currently visible pages. This allows an 
administrator to create a limited access to the Internet by controlling the links on pages 
accessible to users. 

10 Example 2: Auto-Update 

The browser can be required to check for updates on hosting server every time it is run 
(or some set interval), and automatically install updates the next time the browser is 
launched. 

Exam pie 3 : Schoo IMail database integration 

15 When launching the browser, the user must login using a dialog within the application. 
The user is logged in on the hosting server and the user's personal settings are pulled 
from the database. A default set of behaviors for the browser may be used in the case of 
users entering nothing or * guest'. This behavior could range from no access to access 
only to the hosting website, to full access with filtering. The default behaviors will be 

20 applied to the application itself, and would only change if the hosting server or the 
administrator pushed the update to the user. 
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Settings are applicable on a user basis, with administration interfaces within the 
monitoring and filtering system, allowing the administrators to assign settings to groups 
or individual users. 

Example 4: Customized look and feel 

5 The host can design an interface which will allow customized interface elements based 
on user preferences. 

Example 5: Bookmarks stored on server 

It is a further advantage to permit bookmarks to 'follow' the user, making them always 
accessible regardless of the computer used. In addition, the district will maintain a list of 
10 bookmarks that are always available and can be edited by administrators. 

The host can also maintain its own list of bookmarks that will be pushed to every user 
regardless of other settings. 

Example 6: History purged after each session 

In order to avoid excess storage use, the history will not stay with the user unless 
15 specified, so each user will start fresh when they login to the browser. 

Example 7: Multilingual keywords 

The system will allow the browser to scan and block sites in languages other than English 
(including full double-byte language support). 

Example 8: Categorized keywords 

20 The system can categorize keywords so that entire categories could be turned on or off. 
For example, sexual content, violence, racism, ecommerce etc. 



Example 9: Levels of filtering 

The system can operate in a manner similar to categorization above to allow 
administrators to define levels of blocking that might be appropriate to certain groups. 
Teachers, high school, middle school, and elementary can have different basic levels 
5 appropriate to them. These levels would work based on the types of keywords blocked. 

Example 10: Localized interface 

The system can incorporate a simultaneous translation function including an Application 
Program Interface to permit all interface elements translated so the browser is accessible 
in all languages, with the correct language being displayed based on the user. 

10 Example 11: Customized look and feel based on administrator and user criteria 

The system will permit the customization of buttons, icons, colors, dialogues, menus etc. 
based on the administrator and user criteria. Elementary school children can be given 
access through a simple interface, while high school students can have a more complex 
and rich interface. 

15 Example 12: Usage log 

The system can be adapted to log every page/site visited by each user, allowing 
administrators to view reports of browsing habits of their users. This will permit 
additional monitoring. For example, if there is substantial late night browsing of 
otherwise benign-looking sites, it may raise a flag as to the nature of the sites. 



Example 13: Time usage restrictions 

In an effort to further limit the improper use of the system, the browser could be allowed 
to run only at particular times or for a certain amount of time per user. 

Example 14: Threshold filtering 

The system can be instructed to check pages for how often keywords appear to better 
determine whether it's likely to be a safe page or not. 



